Fresenius Medical Care (FME) and certain affiliated entities experienced a cybersecurity incident involving identifiable personal information of certain individuals. This notice explains what happened, the information potentially involved, our response, and steps individuals can take to help protect their information.
What happened
On August 18, 2026, an unauthorized third party gained access to an FME employee’s account and viewed and copied some FME files. FME detected the suspicious activity on August 19, 2026, promptly took steps to contain the incident, and secured the affected account that same day. The incident did not affect FME’s medical devices, patient care, manufacturing operations, or business continuity.
On August 28, 2026, FME determined that some identifiable personal information was affected. FME is conducting a detailed review of the impacted data to determine what information was involved and identify individuals whose information may have been affected.
What information was involved
As of the date of this notice, FME’s data analysis is ongoing. Once the data analysis is complete, FME will send notification letters to individuals whose personal information was affected and for whom FME has contact information. Based on FME’s review to date, the files may have included name, address, date of birth, Social Security number, medical record number, health insurance information, treatment, or other health information. FME has not identified payment card or bank account information in the files reviewed to date.
What FME is doing
After identifying the incident, FME secured the affected account, took additional steps to strengthen the security of its systems, and launched an investigation. FME engaged leading cybersecurity experts to assist with its incident response efforts and notified law enforcement. Individuals who receive a letter from FME notifying them that their data may have been impacted will be offered complimentary credit monitoring, fraud consultation, and identity theft restoration services.
What individuals can do
FME has no evidence at this time that any affected individual’s information has been subject to identity theft or fraud, but we encourage individuals to remain vigilant by reviewing their account statements and monitoring their free credit reports for suspicious activity and errors. Instructions and general information about identity theft protection are provided below. Individuals may contact us at Substitute_Event_Notice@freseniusmedicalcare.com.
FME regrets that this incident occurred and recognizes the concern it may cause. We take the privacy and security of individuals’ information very seriously and will continue to take steps to protect the information entrusted to us.
General information about identity theft protection
Individuals can remain vigilant for incidents of fraud and identity theft by reviewing account statements, health insurance explanation of benefits statements, and credit reports for unauthorized activity.
Credit Reports. Under federal law, you are entitled to a free copy of your credit report from each of the three nationwide credit reporting agencies. The agencies currently make free reports available weekly at www.AnnualCreditReport.com or by calling 1-877-322-8228. You may also complete the Annual Credit Report Request Form available at https://www.annualcreditreport.com/manualRequestForm.action and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. You may contact the nationwide credit reporting agencies at:
- Equifax, P.O. Box 105788, Atlanta, GA 30348, www.equifax.com, 1-800-525-6285
- Experian, P.O. Box 9554, Allen, TX 75013, www.experian.com, 1-888-397-3742
- TransUnion, P.O. Box 2000, Chester, PA 19016, www.transunion.com, 1-800-680-7289
Fraud Alert. You may place a fraud alert in your file by calling one of the three nationwide credit reporting agencies noted above. A fraud alert tells creditors to follow certain procedures, including contacting you before they open any new accounts or change your existing accounts. For that reason, placing a fraud alert can protect you but also may delay you when you seek to obtain credit.
Security Freeze. You also have the right to place a security freeze on your credit report by contacting any of the credit bureaus listed above. A security freeze is intended to prevent credit, loans, and services from being approved in your name without your consent. You may be able to place a freeze using an online process, an automated telephone line, or a written request. The request generally must include: (1) your full name, with middle initial and any suffixes; (2) your Social Security number; (3) your date of birth; (4) your current address and any previous addresses for the past five years; and (5) any applicable incident report or complaint with a law enforcement agency. The request must also include a copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. You can place and lift a security freeze on your credit report free of charge.
Federal Trade Commission (FTC) and State Attorneys General. If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should contact the FTC and/or your state attorney general for information on how to prevent or avoid identity theft. You can contact the FTC at: Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580, www.identitytheft.gov, 1-877-IDTHEFT (438-4338).
